Data retention & deletion

What personal data Echlon keeps after you stop using the platform, how long we keep it and why, your privacy rights under the BVI DPA, and how to make a privacy or deletion request.

What we keep, and why

Financial regulations require Echlon and its licensed partners to keep records that verify who our customers are and document their activity. Keeping these records is a legal obligation, not a choice — it lets us meet anti-money-laundering, sanctions, tax, and audit requirements, and respond to lawful requests from regulators or authorities.

The records we retain generally include:

Identity and verification information collected during onboarding (KYC for individuals, KYB for businesses)
Transaction history and account activity
Compliance and screening results tied to your account
Correspondence with our support and compliance teams

How long we keep it

As a general rule, we keep your records for at least 5 years after the end of your relationship with Echlon — for example, after you close your account. Some records are kept longer where the law requires it:

Identity and verification records (KYC/KYB): at least 5 years after the business relationship ends
Transaction records: at least 5 years after the business relationship ends
Sanctions-screening records: at least 10 years
Marketing preferences: kept while you're opted in, and for 3 years after you opt out
Other compliance records: kept for as long as the law requires, which in some cases is longer

Records may be kept for longer still where a court, regulator, or law-enforcement authority requires it. Because these periods are set by regulation, they apply whether or not you're still an active customer.

Closing your account does not delete your records. Closure ends your access to Echlon's services, but the records we're legally required to keep remain — securely stored and used only for legal and regulatory purposes. Closing your account and deleting your data are two different requests; see Closing your account & withdrawing your funds.

What we delete

When a record is no longer within its required retention period, it is securely and irreversibly deleted in line with our data-protection obligations. In practice this means:

While you're a customer: we keep the data needed to operate your account and meet our legal obligations.
After your account closes: your access ends, and records enter their retention period. Anything under a legal retention requirement is preserved until that period expires.
After retention expires: data that is no longer required, and not subject to a legal, regulatory, or indefinite retention obligation, is permanently deleted from our systems.

Your privacy rights

Echlon handles personal data in line with the British Virgin Islands Data Protection Act, 2021. You can ask us to:

Access the personal data we hold about you
Correct information that's inaccurate or incomplete
Delete your data (erasure) — except where we're legally required to keep it
Restrict or object to certain processing
Request human review of a decision made only by automated tools — for example, an automated check that affected your access

Some rights have limits: we can't delete records we're legally required to retain, and access may be restricted where sharing would interfere with a compliance investigation. For the full detail, see our Privacy Policy and the privacy section of our Terms of Service.

How your data is protected

Records we retain are encrypted both at rest and in transit, and access is limited to authorized personnel through multi-factor authentication and role-based controls. For more on how we secure and handle your information, see Security & compliance — Data protection.

A note on your non-custodial wallet

Echlon is non-custodial: your Checking wallet lives on the blockchain and stays under your control. Blockchain transactions are, by design, permanent and publicly visible — they exist on the network itself, not on Echlon's systems, so they can't be edited or deleted by anyone, including Echlon. A privacy request applies to the personal data Echlon holds, not to on-chain activity. See Wallet & keys for how your wallet works.

Common questions

Can I ask Echlon to delete all of my data right now?

You can submit a deletion request at any time, but we can't delete records we're legally required to retain. We'll delete what we can and explain what must be kept, and for how long.

I closed my account. Why do you still have my information?

Regulations require us to keep verification and transaction records for a set period after your relationship with us ends — at least 5 years, and longer for some records. This is standard across regulated financial services.

Is closing my account the same as deleting my data?

No. Closing your account ends your access to Echlon's services — you can start it yourself in Settings → Security. Deleting your data is a separate privacy request (contact [email protected]), and is subject to the retention rules above.

Is my data sold or used for advertising?

No — we don't sell your data, and we don't use tracking technologies for advertising or marketing profiling. Marketing communications are opt-in only. Your information may be shared with licensed partners, verification and screening providers, and authorities where required by law. See Security & compliance for details.

How do I get a copy of my statements before requesting deletion?

Download what you need first — see Account statements, receipts & transaction exports. After closure, retrieving documents requires contacting support.

Still need help?

For a privacy or deletion request, email [email protected]. For general account questions, reach us at [email protected] or on WhatsApp (+1 (787) 468-5842).